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Information Commissioner's Office 


DATA PROTECTION ACT 1998 


SUPERVISORY POWERS OF THE INFORMATION COMMISSIONER 


ENFORCEMENT NOTICE 


Your Home Improvements Ltd 


78 Southill Road, Parkstone, Poole, Dorset, BH12 3AS 


The Information Commissioner (“the Commissioner”) has decided to 
issue Your Home Improvements Ltd (“YHIL”) with an enforcement 
notice under section 40 of the Data Protection Act 1998 (“DPA”). The 
penalty is being issued because of a serious contravention of 
regulation21 of the Privacy and Electronic Communications (EC 
Directive) Regulations 2003 (“PECR”). 


This notice explains the Commissioner's decision. 


Legal framework 


YHIL, whose registered office is given above (Companies House 
Registration Number: 11028090) is the organisation stated in this 
notice to have used a public electronic communications service for the 
purpose of making unsolicited calls for the purposes of direct marketing 


contrary to regulation 21 of PECR. 


Regulation 21 applies to the making of unsolicited calls for direct 


marketing purposes. It means that if a company wants to make calls 
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promoting a product or service to an individual who has a telephone 
number which is registered with the Telephone Preference Service Ltd 


(“TPS”), then that individual must have given their consent to that 


company to receive such calls. 
Regulation 21 paragraph (1) of PECR provides that: 


“(1) A person shall neither use, nor instigate the use of, a public 
electronic communications service for the purposes of making 


unsolicited calls for direct marketing purposes where- 


(a) the called line is that of a subscriber who has previously 
notified the caller that such calls should not for the time being 


be made on that line; or 


(b) the number allocated to a subscriber in respect of the called 


line is one listed in the register kept under regulation 26.” 
Regulation 21 paragraphs (2), (3), (4) and (5) provide that: 


“(2) A subscriber shall not permit his line to be used in contravention 


of paragraph (1). 


(3) A person shall not be held to have contravened paragraph (1)(b) 
where the number allocated to the called line has been listed on the 
register for less than 28 days preceding that on which the call is 


made. 


(4) Where a subscriber who has caused a number allocated to a line of 
his to be listed in the register kept under regulation 26 has notified 


a caller that he does not, for the time being, object to such calls 
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being made on that line by that caller, such calls may be made by 


that caller on that line, notwithstanding that the number allocated 


to that line is listed in the said register. 


(5) Where a subscriber has given a caller notification pursuant to 


paragraph (4) in relation to a line of his— 


(a) the subscriber shall be free to withdraw that notification at 
any time, and 
(b) where such notification is withdrawn, the caller shall not 


make such calls on that line.” 


Under regulation 26 of PECR, the Commissioner is required to maintain 
a register of numbers allocated to subscribers who have notified them 
that they do not wish, for the time being, to receive unsolicited calls for 
direct marketing purposes on those lines. The Telephone Preference 
Service Limited (“TPS”) is a limited company which operates the 
register on the Commissioner’s behalf. Businesses who wish to carry 
out direct marketing by telephone can subscribe to the TPS for a fee 


and receive from them monthly a list of numbers on that register. 


Section 122(5) of the DPA18 defines direct marketing as “the 
communication (by whatever means) of any advertising material which 
is directed to particular individuals”. This definition also applies for the 
purposes of PECR (see regulation 2(2) PECR & Schedule 19 paragraphs 
430 & 432(6) DPA18). 


Consent in PECR is defined by reference to the concept of consent in 
Regulation 2016/679 (“the GDPR”): regulation 8(2) of the Data 
Protection, Privacy and Electronic Communications (Amendments etc) 
(EU Exit) Regulations 2019. Article 4(11) of the GDPR sets out the 
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following definition: “‘consent’ of the data subject means any freely 
given, specific, informed and unambiguous indication of the data 
subject's wishes by which he or she, by a statement or by a clear 
affirmative action, signifies agreement to the processing of personal 


data relating to him or her”. 


“Individual” is defined in regulation 2(1) of PECR as “a living individual 


and includes an unincorporated body of such individuals”. 


A “subscriber” is defined in regulation 2(1) of PECR as “a person who is 
a party to a contract with a provider of public electronic 


communications services for the supply of such services”. 


The DPA contains enforcement provisions at Part V which are 
exercisable by the Commissioner. Those provisions are modified and 
extended for the purposes of PECR by Schedule 1 PECR. 


Section 40(1)(a) of the DPA (as extended and modified by PECR) 
provides that if the Commissioner is satisfied that a person has 
contravened or is contravening any of the requirements of the 
Regulations, she may serve him with an Enforcement Notice requiring 
him to take within such time as may be specified in the Notice, or to 
refrain from taking after such time as may be so specified, such steps 


as are so specified. 


PECR implements Directive 2002/58/EC, and Directive 2009/136/EC 
which amended the earlier Directive. Both the Directive and PECR are 
“designed to protect the privacy of electronic communications users”: 
Leave.EU & Eldon Insurance Services v Information Commissioner 
[2021] UKUT 26 (AAC) at paragraph 26. The Commissioner seeks to 
interpret and apply PECR in a manner consistent with the purpose of 


the Directive and PECR of ensuring a high level of protection of the 
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privacy of individuals, and in particular the protections provided from 
receiving unsolicited direct marketing communications which the 


individual has not consented to receive. 


The provisions of the DPA remain in force for the purposes of PECR 
notwithstanding the introduction of the DPA18: see paragraph 58(1) of 
Schedule 20 to the DPA18. 


The contravention 


The Commissioner finds that YHIL contravened regulation 21 of PECR. 


The Commissioner finds that the contravention was as follows: 


Between 1 June 2020 and 31 July 2020, YHIL used a public 
telecommunications service for the purposes of making 1,718 
unsolicited calls for direct marketing purposes to subscribers where the 
number allocated to the subscriber in respect of the called line was a 
number listed on the register of numbers kept by the Commissioner in 
accordance with regulation 26, contrary to regulation 21(1)(b) of PECR. 
This resulted in 4 complaints being made to the TPS and the 


Commissioner. 


The Commissioner is also satisfied for the purposes of regulation 21 
that these 1,718 unsolicited direct marketing calls were made to 
subscribers who had registered with the TPS at least 28 days prior to 
receiving the calls, and they had not given their prior consent to YHIL 


to receive calls. 
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20. The Commissioner has considered, as she is required to do under 
section 40(2) of the DPA (as extended and modified by PECR) when 
deciding whether to serve an Enforcement Notice, whether any 
contravention has caused or is likely to cause any person damage or 
distress. The Commissioner has decided that it is unlikely that actual 
damage has been caused in this instance, but notes the distress 


prevalent in some of the complaints received about YHIL’s activities. 


21. In view of the matters referred to above the Commissioner hereby 
gives notice that, in exercise of her powers under section 40 of the 
DPA, she requires YHIL to take the steps specified in Annex 1 of this 


Notice. 
Right of Appeal 


22. There is a right of appeal against this Notice to the First-tier Tribunal 
(Information Rights), part of the General Regulatory Chamber. 


Information about appeals is set out in the attached Annex 2. 


Dated the 20t" day of September2021. 


Andy Curry 

Head of Investigations 
Information Commissioner’s Office 
Wycliffe House 

Water Lane 

Wilmslow 

Cheshire 

SK9 5AF 
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ANNEX 1 
TERMS OF THE ENFORCEMENT NOTICE 
YHIL shall within 30 days of the date of this notice: 
e Neither use, nor instigate the use of, a public electronic 
communications service for the purposes of making unsolicited calls 


for direct marketing purposes where the called line is that of: 


(a) a subscriber who has previously notified YHIL that such calls 


should not be made on that line; or 


(b) a subscriber who has registered their number with the TPS at 
least 28 days previously and who has not notified YHIL that they 


do not object to such calls being made. 
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ANNEX 2 


RIGHTS OF APPEAL AGAINST DECISIONS OF THE COMMISSIONER 


1. Section 48 of the Data Protection Act 1998 gives any person upon whom 
an enforcement notice has been served a right of appeal to the First-tier 


Tribunal (Information Rights) (the “Tribunal”) against the notice. 
2. If you decide to appeal and if the Tribunal considers: - 


a) that the notice against which the appeal is brought is not in accordance 
with the law; or 
b) to the extent that the notice involved an exercise of discretion by the 


Commissioner, that she ought to have exercised her discretion differently, 


the Tribunal will allow the appeal or substitute such other decision as could 
have been made by the Commissioner. In any other case the Tribunal will 
dismiss the appeal. 


3. You may bring an appeal by serving a notice of appeal on the Tribunal at 


the following address: 


General Regulatory Chamber 
HM Courts & Tribunals Service 
PO Box 9300 

Leicester 

LE1 8DJ 

Telephone: 0203 936 8963 


Email: grc@justice.gov.uk 


Information Commissioner's Office 


e The notice of appeal should be served on the Tribunal within 28 days of the 


date on which the enforcement notice was sent 


4. The statutory provisions concerning appeals to the First-tier Tribunal 
(General Regulatory Chamber) are contained in sections 48 and 49 of, and 
Schedule 6 to, the Data Protection Act 1998, and Tribunal Procedure (First- 
tier Tribunal) (General Regulatory Chamber) Rules 2009 (Statutory 
Instrument 2009 No. 1976 (L.20)). 


